3 ms·
From what did you conclude this? I read it as if it allowed login over serial for those accounts, he didn't mention ssh in that context.
by jmartinpetersen 8y ago
From what did you conclude this? I read it as if it allowed login over serial for those accounts, he didn't mention ssh in that context.
- solarkraft 8y agoStill, unprotected accounts seem like a pretty insecure idea to me. That's how our "attacker" got themselves in. Of course in a free world physical access to a device you own would mean that you can modify its behavior ("hack" the software).
- jmartinpetersen 8y agoSure, of course, but requiring a serial connection through a physical cable is still a less useful attack vector than ssh over wifi, which is what I gathered from the grandfather post - but not the article.
- bdelay 8y agoYou are correct. I don't believe those accounts worked over ssh due to a lack of password, just local serial.